Security Engineer, Application

Serval
San Francisco
Workplace: OnsiteFull timeUSD 200,000 - 325,000 annuallyFunction: CybersecurityExperience: 10+ yearsSkills: ["Communication","Leadership","Influence","Mentoring","Problem-solving"]

Lead Serval’s application security program as a hands-on security leader, shaping secure SDLC practices, threat modeling, and vulnerability management across the platform. Build and mentor a security team, partner with Engineering and Product to embed security by design, and drive scalable security architectures for a growing AI-powered enterprise automation platform.

Loading

Loading job details...

Preparing the role view and application actions.

FursaFursa
Serval
Serval
2 months ago

Security Engineer, Application

✓ Verified Job

Canonical indexed version, validated from employer's careers page.

Source: Company careers pageValidated by: Fursa AI
Last checked: 3 hours agoStatus: Live

Job Summary

Lead Serval’s application security program as a hands-on security leader, shaping secure SDLC practices, threat modeling, and vulnerability management across the platform. Build and mentor a security team, partner with Engineering and Product to embed security by design, and drive scalable security architectures for a growing AI-powered enterprise automation platform.
Location: San Francisco
Workplace: Onsite
Employment Type: Full time
Job Function: Cybersecurity
Seniority: Sr. Manager level

Key Responsibilities

  • •Design, implement, and operate Serval's application security program, including secure SDLC practices, threat modeling, secure design review, code review, and remediation of vulnerabilities across our services, agent platform, integrations, and customer-facing surfaces.
  • •Build, lead, and directly mentor a team spanning product security, secure software development, and vulnerability management, hiring and scaling these functions deliberately and proportionately as Serval's platform and customer footprint grow.
  • •Establish world-class engineering rigor through secure coding standards, paved-path libraries and frameworks, security design patterns that scale security expertise across the engineering organization.
  • •Improve security coverage and signal quality by building and tuning the automated tooling that catches issues early (SAST, DAST, SCA, secrets scanning, dependency and supply-chain controls, and CI/CD security gates) and by partnering with engineering to make findings reliable, actionable, and low-friction to fix.
  • •Own the vulnerability lifecycle end-to-end: intake from internal testing, researchers, and bug bounty; triage and severity assessment; SLAs and remediation tracking; and coordinated disclosure.

Pay and Benefits

Salary: USD 200,000 - 325,000 annually

Key Requirements

  • •Have 10+ years in cybersecurity with deep expertise in application security, secure software development, and vulnerability management.
  • •Have deep experience building and leading application/product security, secure-SDLC, and vulnerability-management functions.
  • •Have stellar leadership skills and a demonstrated history of driving durable, continuous improvements to programs, processes, and people.
  • •Have strong software engineering fundamentals and can read, write, and review production code, partnering with engineers as a peer rather than a gatekeeper.
  • •Have exceptional written and verbal communication skills, can remain calm under pressure, and can effectively influence engineering and product decisions across a diverse gamut of teams, expertise, and seniority.
Experience:10+ yearsCybersecuritySecurity engineeringApplication securitySecure SDLCVulnerability management
Skills:CommunicationLeadershipInfluenceMentoringProblem-solving
Languages:English
Tech Stack:SASTDASTSCASecrets detectionFuzzingCI/CDSecure SDLCThreat modelingVulnerability management

Company Brief

Serval
Serval builds software solutions for secure communications and collaboration, offering tools that help teams connect, share data, and coordinate workflows across distributed environments.
Industry: SaaS
Website